kev8326
asked on
Active Directory Migration
Hi
Im trying to do an Active Directory migration from one domain to another, these are differnet forests i.e. abc.com and 123.com. Here's whats been done, DNS it working with secondary zones setup for each server so they can handle dns requests. I have also created the trusts between the domains and validated each fine.
However ive installed the Active Directory Migration tool but when i got to move a user I get the following error in the log
2007-03-21 20:28:05 ERR2:7301 Failed to migrate source object 'CN=admin admin' to domain 'abc.com'. The target object could not be created. hr=0x80070005 Access is denied.
Can yoy help?
Thanks
Im trying to do an Active Directory migration from one domain to another, these are differnet forests i.e. abc.com and 123.com. Here's whats been done, DNS it working with secondary zones setup for each server so they can handle dns requests. I have also created the trusts between the domains and validated each fine.
However ive installed the Active Directory Migration tool but when i got to move a user I get the following error in the log
2007-03-21 20:28:05 ERR2:7301 Failed to migrate source object 'CN=admin admin' to domain 'abc.com'. The target object could not be created. hr=0x80070005 Access is denied.
Can yoy help?
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi
Somehow got it working, i also added the admin on domain A to the account operators group in Domain B and it started working. Does that sound like it was the isue?
Somehow got it working, i also added the admin on domain A to the account operators group in Domain B and it started working. Does that sound like it was the isue?
deffinitely, you need to have the priviliges on the local domain :) Nice work mate!
ASKER
I believe that is where i was going wrong, i was putting in details of the target domain rather than the source. It appears i've moved forward and gained another stumbling block...
I get a message SID History for test1 cannot be updated because auditing is not enabled on abc.com. rc=8536.\n This operation requires that auditing be enabled for Success and Failure auditing of account management operations
I have enabled this in group policy and made sure that it has success and failures. this is done at the root of AD and there isnt anything to stop it propogating to other OU's.
Is there something ive missed?
thanks